233 matches found
CVE-2022-1774
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7...
CVE-2022-1774 Exposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7...
CVE-2022-1774 Exposure of Sensitive Information to an Unauthorized Actor in jgraph/drawio
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7...
CVE-2022-1774
CVE-2022-1774 affects the jgraph/drawio project prior to version 18.0.7. The provided connected sources consistently describe exposure of sensitive information to an unauthorized actor in the draw.io GitHub repository, with multiple entries corroborating the issue and noting the fixed version as ...
CVE-2022-1767
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.7...
CVE-2022-1767
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.7...
CVE-2022-1767 Server-Side Request Forgery (SSRF) in jgraph/drawio
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.7...
CVE-2022-1767 Server-Side Request Forgery (SSRF) in jgraph/drawio
Server-Side Request Forgery SSRF in GitHub repository jgraph/drawio prior to 18.0.7...
CVE-2022-1767
The CVE-2022-1767 instance concerns a Server-Side Request Forgery (SSRF) in the GitHub repository jgraph/drawio, affecting versions prior to 18.0.7. Affected component: draw.io server-side handling could be tricked into issuing unintended requests. Impact reported in CVSS: CVSS3.1 base score 7.5 ...
CVE-2022-1727
Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...
CVE-2022-1727
Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...
Input validation
Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...
CVE-2022-1727 Improper Input Validation in jgraph/drawio
Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...
CVE-2022-1727 Improper Input Validation in jgraph/drawio
Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6...
CVE-2022-1727
CVE-2022-1727 affects the GitHub project jgraph/drawio prior to version 18.0.6. The root cause is improper input validation in the Electron desktop app’s link handling, allowing crafted links (e.g., via file: or other dangerous schemas) to be passed to shell.openExternal and potentially trigger c...
PT-2022-14099 · Unknown · Jgraph/Drawio
Name of the Vulnerable Software and Affected Versions: jgraph/drawio versions prior to 18.0.7 Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository jgraph/drawio. SSRF is a type of attack where an attacker can trick a server into making requests to interna...
PT-2022-14104 · Unknown · Jgraph/Drawio
Name of the Vulnerable Software and Affected Versions: jgraph/drawio versions prior to 18.0.7 Description: The issue concerns exposure of sensitive information to an unauthorized actor. Recommendations: For versions prior to 18.0.7, update to version 18.0.7 or later to resolve the issue...
PT-2022-14077 · Unknown · Jgraph/Drawio
Name of the Vulnerable Software and Affected Versions: jgraph/drawio versions prior to 18.0.6 Description: The issue is related to improper input validation in the GitHub repository jgraph/drawio. Recommendations: For versions prior to 18.0.6, update to version 18.0.6 or later to resolve the issu...
JGraph draw.io输入验证错误漏洞
JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. A security vulnerability exists in JGraph draw.io versions prior to 18.0.6 that stems from improper input validation...